IP Library Granted Patent US 10,516,668
Granted Patent B2
US 10,516,668 · App. 14/512,796 · Granted Dec 24, 2019

Security module and method within an information handling system

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,516,668
App. No.
14/512,796
Granted
Dec 24, 2019
Kind
B2
Abstract

A security module and method within an information handling system are disclosed. In a particular form, a processing module can include a local processor configurable to initiate access to resources of a host processing system. The processing module can also include a security module configured to enable use of the resources of the host processing system using a security metric. According to an aspect, the security module can be further configured to detect the security metric, and enable access to a resource of the host processing system in response to the security metric. The security module can further be configured to disable access to another resource of the host processing system in response to the security metric.

Claims (82)

1. A processing module comprising:

a local processor device configurable to initiate access to resources of a host processing system; and

a security module configured to enable use of the resources of the host processing system using a security metric, wherein the security module is further configured to:

detect the security metric, wherein the security metric includes one or more of the following:

a global location within a cellular, wireless, network, or GPS network;

date/time of access;

availability of encryption keys or other security data; or

eminent domain and operating conditions of the processing module or the local processor device;

enable and disable access to a hardware resource of the host processing system not only in response to a comparison of the security metric to a state of the host processing system but also based on whether the host processing system is in a low-power operating state or a run operating state and leaving the host processing system in the low-powered operating state when enabling access to the hardware resource, if the host processing system entered the low-powered operating state prior to a disabling of access to hardware resources initiated by a signal from the processing module; and

disable access to another hardware resource of the host processing system in response to another application of the security metric.

2. The processing module of claim 1 , wherein the security module is further configured to detect a global location of the host processing system and compare the global location to a list of valid global locations.

3. The processing module of claim 1 , wherein the security module is further configured to:

enable access to the hardware resource during the low-powered operating state of the host processing system in response to validating the security metric; and

enable access to a plurality of hardware resources of the host processing system during the run operating state of the host processing system in response to validating the security metric, wherein the security module is configured not to enable access to the plurality of hardware resources of the host processing system during the low-powered operating state of the host processing system.

4. The processing module of claim 3 , further comprising:

a wireless communication module configured to receive wireless data from a network location; and

an interface configured to receive data for use by the host processing system;

wherein the security module is configured to:

detect a global network location of the received wireless data and a global network location of the received data;

compare the global network location of the received wireless data to a list of valid global network locations;

disable use of the received wireless data in response to an invalid global network location;

compare the global network location of the received data to the list of valid global network locations; and

disable use of the received data by the host processing system in response to an invalid network location.

5. The processing module of claim 1 , wherein:

a housing stores the security module, the local processor, and a wireless communication module; and

an interface between the housing and the host processing system is configured to be removeably coupled to a host interface of the host processing system, wherein the processing module is external to the host processing system and the wireless communication module is configured to communicate with a remote system manager configured to initiate enabling and disabling use of the host processing system using the security metric.

6. A method comprising:

detecting, by a processing module including a local processor device, an operating state of an information handling system to be one of a low-powered operating state and a run operating state;

comparing a security metric to another state of the information handling system, wherein the security metric includes one or more of the following:

a global location within a cellular, wireless, network, or GPS network;

date/time of access;

availability of encryption keys or other security data; or

eminent domain and operating conditions of the processing module or the local processor device; and

altering an operating state of a hardware resource of the information handling system not only in response to the comparison but also the operating state of the information handling system and leaving the information handling system in the low-powered operating state, when enabling access to the hardware resource, if the information handling system entered the low-powered operating state prior to a disabling of access to hardware resources initiated by a signal from the processing module.

7. The method of claim 6 , further comprising:

detecting a global location of the information handling system;

comparing the global location to a list of valid global locations.

8. The method of claim 7 , further comprising:

detecting the current operating state of the information handling system as a low-powered operating state; and

enabling the hardware resource of the information handling system based on a valid global location of the information handling system.

9. The method of claim 7 , further comprising:

detecting a global network location of the information handling system;

detecting a security access level of the global network location;

comparing the global network location to a list of valid global network locations;

enabling the hardware resource in response to determining the global network location is a valid global network location; and

disabling the hardware resource in response to determining the global network location is an invalid global network location.

10. The method of claim 7 , further comprising:

detecting the information handling system in a run operating state;

detecting a global network location of the information handling system;

detecting an invalid global network location; and

disabling use of the information handling system in response to detecting the invalid global network location.

11. The method of claim 7 , further comprising:

receiving data using a communication module of a host processing system of the information handling system;

routing the data to the processing module;

detecting whether the data is communicated from a valid global network location; and

disabling use of the data upon detecting the global network location is invalid.

12. The method of claim 6 , wherein:

a housing stores the local processor and a wireless communication module;

an interface between the housing and a host processing system of the information handling system is configured to be removeably coupled to a host interface of the host processing system, wherein the processing module is external to the host processing system; and

the method includes the local processor communicating with a remote system manager through the wireless communication module; and

the method includes the remote system manager enabling and disabling use of the host processing system using the security metric.

13. A processing module comprising:

a local processor device configurable to initiate access to resources of a host processing system;

a security module configured to enable use of the resources of the host processing system using a security metric, wherein the security module is further configured to:

detect the security metric, wherein the security metric includes one or more of the following:

a global location within a cellular, wireless, network, or GPS network;

date/time of access;

availability of encryption keys or other security data;

eminent domain and operating conditions of the processing module or the local processor device;

enable access to a hardware resource of the host processing system not only in response to a comparison of the security metric to a state of the host processing system but also based on whether the host processing system is in a low-power operating state or a run operating state and leaving the host processing system in the low-powered operating state, when enabling access to the hardware resource, if the host processing system entered the low-powered operating state prior to a disabling of access to hardware resources initiated by a signal from the processing module;

a wireless communication module accessible to a remote system manager configured to initiate enabling and disabling use of the host processing system using the security metric;

a housing storing the security module, the local processor, and the wireless communication module; and

an interface between the housing and the host processing system configured to be removeably coupled to a host interface of the host processing system, wherein the processing module is external to the host processing system.

14. The processing module of claim 13 , wherein:

the processing module is configured to be coupled to a network data center via wireline or wireless communication; and

the processing module is configured to serve as a primary communication interface with the network data center for the host processing system.

15. The processing module of claim 13 , wherein the processing module is configured to be coupled to a digital audio interface of the host processing system.

16. The processing module of claim 13 , wherein the processing module is configured to be coupled to a three-way multiplexer of the host processing system, the multiplexer configured to be also coupled to a Minicard wireless wide area network (WWAN) and a USB bus.

17. A Minicard wireless wide area network (WWAN) comprising the processing module of claim 13 , wherein the Minicard WWAN is configured to be coupled to the host processing system via a Minicard WWAN enabled interface.

18. The processing module of claim 13 , wherein the processing module is configured to be coupled to the host processing system via a peripheral communication bus.

19. The processing module of claim 13 , wherein the processing module is configured to enable communications with the host processing system when the host processing system is in a reduced resource or reduced-state operating mode.

20. The processing module of claim 13 , wherein the processing module is configured not to access the host processing system directly, and wherein the processing module is configured to communicate with the host processing system by communicating with a network accessible by the host processing system.

Assignments (13)
RELEASE OF SECURITY INTEREST IN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (053546/0001) Recorded Jun 23, 2022
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
To: DELL MARKETING L.P. (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO CREDANT TECHNOLOGIES, INC.); DELL INTERNATIONAL L.L.C.; DELL PRODUCTS L.P.; DELL USA L.P.; EMC CORPORATION; DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO FORCE10 NETWORKS, INC. AND WYSE TECHNOLOGY L.L.C.); EMC IP HOLDING COMPANY LLC
Reel/Frame 071642/0001 →
RELEASE OF SECURITY INTEREST IN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (052216/0758) Recorded Jun 23, 2022
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
To: DELL PRODUCTS L.P.; EMC IP HOLDING COMPANY LLC
Reel/Frame 060438/0680 →
RELEASE OF SECURITY INTEREST AF REEL 052243 FRAME 0773 Recorded Nov 2, 2021
From: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH
To: DELL PRODUCTS L.P.; EMC IP HOLDING COMPANY LLC
Reel/Frame 058001/0152 →
SECURITY AGREEMENT Recorded Apr 22, 2020
From: CREDANT TECHNOLOGIES INC.; DELL INTERNATIONAL L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL USA L.P.; EMC CORPORATION; FORCE10 NETWORKS, INC.; WYSE TECHNOLOGY L.L.C.; EMC IP HOLDING COMPANY LLC
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A.
Reel/Frame 053546/0001 →
SECURITY AGREEMENT Recorded Mar 26, 2020
From: DELL PRODUCTS L.P.; EMC IP HOLDING COMPANY LLC
To: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH
Reel/Frame 052243/0773 →
PATENT SECURITY AGREEMENT (NOTES) Recorded Mar 24, 2020
From: DELL PRODUCTS L.P.; EMC IP HOLDING COMPANY LLC
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS COLLATERAL AGENT
Reel/Frame 052216/0758 →
SECURITY AGREEMENT Recorded Mar 21, 2019
From: CREDANT TECHNOLOGIES, INC.; DELL INTERNATIONAL L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL USA L.P.; EMC CORPORATION; FORCE10 NETWORKS, INC.; WYSE TECHNOLOGY L.L.C.; EMC IP HOLDING COMPANY LLC
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A.
Reel/Frame 049452/0223 →
RELEASE OF REEL 034591 FRAME 0391 (TL) Recorded Sep 14, 2016
From: BANK OF AMERICA, N.A., AS COLLATERAL AGENT
To: DELL PRODUCTS L.P.
Reel/Frame 040027/0719 →
RELEASE OF REEL 034590 FRAME 0731 (NOTE) Recorded Sep 14, 2016
From: BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS COLLATERAL AGENT
To: DELL PRODUCTS L.P.
Reel/Frame 040027/0070 →
RELEASE OF REEL 034590 FRAME 0696 (ABL) Recorded Sep 13, 2016
From: BANK OF AMERICA, N.A., AS ADMINISTRATIVE AGENT
To: DELL PRODUCTS L.P.
Reel/Frame 040016/0964 →
SUPPLEMENT TO PATENT SECURITY AGREEMENT (NOTES) Recorded Dec 10, 2014
From: DELL PRODUCTS L.P.; DELL SOFTWARE INC.; FORCE10 NETWORKS, INC.; WYSE TECHNOLOGY L.L.C.
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
Reel/Frame 034590/0731 →
SUPPLEMENT TO PATENT SECURITY AGREEMENT (TERM LOAN) Recorded Dec 10, 2014
From: DELL PRODUCTS L.P.; DELL SOFTWARE INC.; FORCE10 NETWORKS, INC.; WYSE TECHNOLOGY L.L.C.
To: BANK OF AMERICA, N.A., AS COLLATERAL AGENT
Reel/Frame 034591/0391 →
SUPPLEMENT TO PATENT SECURITY AGREEMENT (ABL) Recorded Dec 10, 2014
From: DELL PRODUCTS L.P.; DELL SOFTWARE INC.; FORCE10 NETWORKS, INC.; WYSE TECHNOLOGY L.L.C.
To: BANK OF AMERICA, N.A., AS ADMINISTRATIVE AGENT
Reel/Frame 034590/0696 →